Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/zq58RZigKbs1kqL5zPhf8Pa_10Y.roa
File: zq58RZigKbs1kqL5zPhf8Pa_10Y.roa (raw, json)
Hash identifier: RBk98l7hNeX/jkMRA0btwFp1gFVgb7XTzh4sXschYqU=
Subject key identifier: CE:AE:7C:45:98:A0:29:BB:35:92:A2:F9:CC:F8:5F:F0:F6:BF:D7:46
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A13964DB305C742CCC430104A1FA2944D8
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/zq58RZigKbs1kqL5zPhf8Pa_10Y.roa
Signing time: Wed 14 Oct 2026 07:51:13 +0000
ROA not before: Wed 14 Oct 2026 07:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152565
IP address blocks: 201.7.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:64:db:30:5c:74:2c:cc:43:01:04:a1:fa:29:44:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 14 07:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceae7c4598a029bb3592a2f9ccf85ff0f6bfd746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:9c:69:9e:26:fd:e9:31:f9:13:16:51:15:
36:6a:b1:99:a8:60:4b:8d:1f:bf:ad:bb:fd:86:21:
b5:bb:2e:36:ef:2c:16:04:5b:c6:ab:f4:ed:0c:f6:
ca:32:b4:ce:39:3c:a9:4c:f4:28:a6:49:d1:6c:49:
da:08:bc:f4:5e:d8:b9:31:13:bb:df:55:cb:61:8e:
a5:5b:77:19:f7:0f:7e:5d:b9:6f:de:2c:37:48:34:
d6:e2:19:5e:7e:d1:3b:d9:91:b1:64:37:01:3f:0d:
c5:aa:15:bf:ce:2d:48:1f:f5:7e:9b:45:d0:d9:90:
7d:11:61:4e:97:20:3b:79:9e:f9:14:7d:82:58:59:
2d:cf:4e:b7:61:1c:20:cb:62:c7:fc:4e:92:04:59:
9d:79:a7:5e:fb:2a:4d:e9:e6:75:1f:73:4d:7f:80:
dd:b7:9e:38:e1:5d:0d:7e:77:44:47:84:2f:fa:b4:
1b:44:db:11:de:9e:c6:0b:81:0e:8f:2f:90:4f:e8:
9b:e9:d7:6c:af:cf:a0:a6:e6:02:8b:2b:f0:a6:6e:
dc:b9:02:b5:70:00:7b:27:b3:76:81:f6:1a:5c:36:
f8:77:b6:92:35:55:f8:e1:b0:59:ff:9c:6b:20:6a:
e1:b6:63:9a:9d:89:e5:af:40:80:df:e4:40:1d:80:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:7C:45:98:A0:29:BB:35:92:A2:F9:CC:F8:5F:F0:F6:BF:D7:46
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/zq58RZigKbs1kqL5zPhf8Pa_10Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.16.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fb:4e:21:28:fa:0b:f5:80:43:0b:12:d9:77:0c:ed:bd:0c:
16:9d:a8:c0:f9:11:e0:fd:b8:a8:8c:76:21:73:8c:72:b1:25:
6b:b2:6f:e5:ab:c8:17:ec:58:63:8d:82:0c:09:da:86:b0:64:
f7:46:b3:ee:f5:a2:f2:27:b0:5c:ef:f8:8e:cc:3c:ab:58:60:
3e:97:72:51:73:1f:b8:6d:c0:7f:b7:d5:b5:60:e9:61:3c:5d:
ec:f4:1b:6c:20:e9:74:3b:59:5f:46:dd:bb:87:29:10:50:4e:
d1:12:20:2e:23:9b:3d:2d:72:ce:24:51:98:0f:36:f9:0b:dc:
71:67:b2:43:2b:57:ba:63:82:2d:57:97:09:07:4a:30:37:81:
13:45:cb:3a:2e:a7:d6:e6:4f:e3:4d:ee:26:dc:7f:ed:63:cf:
2c:ae:e9:a2:52:6f:de:52:a2:e1:db:8b:f7:a3:ff:fa:22:ff:
23:9d:9e:c9:e8:30:b0:c9:f4:47:05:85:cc:11:24:59:1c:36:
a9:a2:28:98:33:18:ac:7b:f9:9c:b9:d5:d4:ab:99:1e:cf:4d:
bd:6f:b8:37:15:54:aa:e9:7f:c9:13:9f:11:02:20:ed:4c:7e:
26:12:a2:b2:9c:89:c6:eb:5b:dc:af:3f:82:97:e9:f3:6f:33:
4c:ae:57:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE5ZNswXHQszEMBBKH6KUTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYxMDE0MDc1MTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWFlN2M0NTk4YTAyOWJiMzU5MmEyZjljY2Y4NWZmMGY2YmZkNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCucaZ4m/ekx+RMWURU2arGZqGBL
jR+/rbv9hiG1uy427ywWBFvGq/TtDPbKMrTOOTypTPQopknRbEnaCLz0Xti5MRO7
31XLYY6lW3cZ9w9+Xblv3iw3SDTW4hleftE72ZGxZDcBPw3FqhW/zi1IH/V+m0XQ
2ZB9EWFOlyA7eZ75FH2CWFktz063YRwgy2LH/E6SBFmdeade+ypN6eZ1H3NNf4Dd
t5444V0NfndER4Qv+rQbRNsR3p7GC4EOjy+QT+ib6ddsr8+gpuYCiyvwpm7cuQK1
cAB7J7N2gfYaXDb4d7aSNVX44bBZ/5xrIGrhtmOanYnlr0CA3+RAHYCxTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6ufEWYoCm7NZKi+cz4X/D2v9dGMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvenE1OFJaaWdLYnMxa3FMNXpQaGY4UGFfMTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQcQMA0G
CSqGSIb3DQEBCwUAA4IBAQCD+04hKPoL9YBDCxLZdwztvQwWnajA+RHg/biojHYh
c4xysSVrsm/lq8gX7FhjjYIMCdqGsGT3RrPu9aLyJ7Bc7/iOzDyrWGA+l3JRcx+4
bcB/t9W1YOlhPF3s9BtsIOl0O1lfRt27hykQUE7REiAuI5s9LXLOJFGYDzb5C9xx
Z7JDK1e6Y4ItV5cJB0owN4ETRcs6LqfW5k/jTe4m3H/tY88srumiUm/eUqLh24v3
o//6Iv8jnZ7J6DCwyfRHBYXMESRZHDapoiiYMxise/mcudXUq5kez029b7g3FVSq
6X/JE58RAiDtTH4mEqKynInG61vcrz+Cl+nzbzNMrlca
-----END CERTIFICATE-----
Generated at Sun Oct 18 08:26:39 2026 by rpki-client